Schedule - Summer D 2015

Edit 9 …

Summer D 201 Schedule

Date
 Chapter
 Coverage
 Readings
 Assignment
 Due Date
05/18/2015
 Introduction
 Readings
 Read the Threat Environment articles and be prepared to discuss in class.

05/20/2015
 Readings
 COSO, COBIT, ERM
 Using COSO to Assess IT Controls (Journal of Accountancy, May 2014)
From the Frameworks & Standards page, read:

05/25/2015
 No Class



05/27/2015
 Chapter 1
 The Threat Environment


06/01/2015
 Chapter 2
 Planning & Policy
 We will be discussing an alternative Risk Assessment method OCTAV Alegro, you can read more here.

06/03/2015
 Module A
 Networking Concepts


06/08/2015
 Chapter 3
 Cryptography
 Read the Cryptography Readings from the Class Readings page

06/10/2015
 Chapter 4
 Secure Networks


06/11/2015
to
06/14/2015
 Exam 1 (Chapter 1-4, Module A, Readings)



06/15/2015
 Chapter 5
 Access Controls


06/17/2015
 Readings
 Passwords
 Read the required readings from the Password section of the Class Readings

06/22/2015
 Chapter 6
 Firewalls


06/24/2015
 Chapter 7
 Host Hardening


06/29/2015
 Chapter 8
 Application Security
 Read the required Application Hardening articles section of the Class Readings

07/01/2015
 Chapter 9 & 10
 Data Protection & Incident and Disaster Response
 Cybersecurity's Maginot Line: A real-world assessment of the defense-in-depth model by Mandiant, May 2014
fireeye-real-world-assessment.pdf

 Access Control Simulation Report
 07/08/2015
07/06/2015
 No Class

Security in the News
 07/08/2015
07/08/2015
 No Class



07/13/2015
 Class Readings
 SOX IT Readings
 This article discusses the Board's role in cybersecurity from a governance perspective:
TCB_DN-V6N6-141.pdf
(Clarke and Olcott, 2014)Read the required readings from the IT Control and SOX section of the Class Readings

07/15/2015
 Class Readings
 SEC Readings and Misc.
  1. Cyberattack's abound yet companies tell SEC losses are few By Chris Strohm, Eric Engleman and Dave Michaels - Apr 3, 2013)
  2. Companies Hacked by Chinese Didn’t Disclose Attacks to Investors By By Chris Strohm, Dave Michaels and Sonja Elmquist - May 21, 2014)
  3. CF Disclosure Guidance: Topic No. 2 S.E.C. (This guidance provides the Division of Corporation Finance's views regarding disclosure obligations relating to cybersecurity risks and cyber incidents)
  4. SEC Cybersecurity Roundtable Archive Webcast
  5. SEC OCIE Cybersecurity Initiative (April 15, 2014)
    Cybersecurity Risk Alert & Appendix - 4.15.14.pdf
  6. SEC OCIE Cybersecurity Examination (February 3, 2105)
    cybersecurity-examination-sweep-summary.pdf
  7. AICPA Top 5 Cybercrimes (2013)
    Top-5-CyberCrimes.pdf
  8. ERM for cloud computing (COSO)
    2012 Chan.pdf

07/16/2015
to
07/18/2015
 Exam 2 (Chapter 5-10, Readings)